$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: E80nSd4by0RLj5rJsk0vselxBFFxbDr5ks5tf8OuL70= Subject key identifier: 86:8B:16:51:F0:5C:76:76:12:0D:B0:D2:80:23:3B:F1:3A:E7:69:56 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 177065B7D890618B7F4C36F45C7596C6DC8856D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 0499 Signing time: Tue 22 Jul 2025 17:51:55 +0000 Manifest this update: Tue 22 Jul 2025 17:46:55 +0000 Manifest next update: Wed 23 Jul 2025 19:12:55 +0000 Files and hashes: 1: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: Nt6v0on8wvNIRTqw0ZzJ5VjTWjEZFT63u0ZbVbhKyNc=) 2: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: emmagp+HFUZ18wR4qaairCi504gFhLIUC/Qi79SMWPg=) 3: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: Y0ZApSmGCRch+djTYBN+U0p8LaOUa+NCEgyRR8hvTcU=) 4: 34352e38312e35362e302f32342d3234203d3e203634323637.roa (hash: kGVNeEKX35ugOpsFmA5GwCl6f0GnZpLJS8pEn3cyWJI=) 5: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: Cjq2FzLN5G1VEvkKyI6FB5noxcWUxvPOvV4W7hBfw5c=) 6: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: LaBCcb8mjeERCC5tHKO7thlovLIwutTtPGiGYEZVPF8=) 7: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: 7ySWNlqh8pfpYqSc3fbfv+VTSwiuDNFNlc7aZa5se9U=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 19:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:70:65:b7:d8:90:61:8b:7f:4c:36:f4:5c:75:96:c6:dc:88:56:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Jul 22 17:46:55 2025 GMT Not After : Jul 23 19:12:55 2025 GMT Subject: CN=868B1651F05C7676120DB0D280233BF13AE76956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:5e:94:69:a2:f9:cf:1a:d1:fa:8c:df:fd: e4:f1:3f:f6:3a:93:69:12:f3:fb:3f:87:0c:19:3e: 35:dd:8f:41:1d:a3:77:7c:ba:9e:3c:76:94:45:7b: 4a:a1:5f:74:34:96:fa:98:bc:f0:0d:bf:95:fd:32: 6e:b0:fe:a5:4b:81:48:af:fa:62:80:3b:fd:18:f1: 41:20:e3:17:77:0a:a5:c3:ed:e4:40:35:77:40:b6: d4:9b:72:15:b5:8a:fd:68:e0:3e:45:23:5b:19:ac: 22:5a:68:fb:dc:59:9c:f0:cf:3c:c2:44:7b:82:79: d5:ef:4b:d3:41:0c:ca:25:ec:d3:99:ab:a8:47:bd: 3a:40:af:9b:2d:67:65:e7:ab:0b:f9:aa:08:e6:66: 28:f6:bd:2a:85:38:f1:1d:ff:d7:d8:16:78:20:b9: 7b:31:94:9e:34:03:47:95:c0:01:3f:a6:b0:4f:4a: 61:28:d8:b2:2b:07:85:df:f3:01:60:10:9d:6d:01: 9d:fb:88:6a:f2:26:66:20:2a:5f:7e:78:fc:33:9c: e8:19:6c:fb:50:f3:1b:42:f2:2f:01:bb:3a:3f:8b: 8f:85:99:ea:b7:6e:87:45:c4:db:2b:be:49:c9:ba: 0d:b3:73:6d:92:c1:9f:9b:81:86:a9:20:ff:3c:70: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8B:16:51:F0:5C:76:76:12:0D:B0:D2:80:23:3B:F1:3A:E7:69:56 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:31:7c:46:cb:a8:f1:50:1e:a3:d3:4e:57:0f:8a:ec:0d:58: 8b:13:e5:fd:9d:4c:8c:c8:78:1a:6a:2e:f6:31:fd:26:f8:03: 06:3b:59:c0:61:0f:57:03:1f:6e:96:8f:49:50:72:a5:c0:79: ca:dd:de:d6:e2:4d:59:ad:07:f6:35:d8:10:a7:90:0d:f0:ef: 89:e5:0c:4f:23:61:86:51:a1:1c:4d:aa:a8:3a:55:cb:ce:25: 4f:72:f2:57:64:fb:7c:94:17:f6:94:90:02:dd:34:40:8b:84: 5e:3d:3e:a5:25:f9:a1:dd:b2:9a:da:43:08:f4:e7:79:c7:58: dc:b8:07:1a:c0:cf:8c:02:f9:83:9d:6f:05:04:89:61:bd:d5: 2c:3f:92:3a:de:cc:95:61:7a:5f:39:29:f8:d7:8d:fa:38:35: 78:ad:a7:af:7d:cf:71:65:98:3c:ef:8c:ea:49:02:62:15:30: e9:d2:e8:9b:fb:3c:a8:7f:da:ba:1b:ea:04:0b:1e:bd:6d:f7: 89:04:e7:f0:6a:5f:cd:cd:8d:9a:0b:2d:b0:db:f2:96:4b:35: 35:96:18:e0:67:d7:5d:d8:9c:a7:18:8e:56:a7:f7:5b:eb:ff: 8f:99:cf:05:e3:44:66:ee:a9:da:ca:70:73:c6:1f:3c:42:d9: 22:df:ea:55 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF3Blt9iQYYt/TDb0XHWWxtyIVtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNTA3MjIxNzQ2NTVaFw0yNTA3MjMxOTEyNTVaMDMxMTAvBgNV BAMTKDg2OEIxNjUxRjA1Qzc2NzYxMjBEQjBEMjgwMjMzQkYxM0FFNzY5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZV6UaaL5zxrR+ozf/eTxP/Y6 k2kS8/s/hwwZPjXdj0Edo3d8up48dpRFe0qhX3Q0lvqYvPANv5X9Mm6w/qVLgUiv +mKAO/0Y8UEg4xd3CqXD7eRANXdAttSbchW1iv1o4D5FI1sZrCJaaPvcWZzwzzzC RHuCedXvS9NBDMol7NOZq6hHvTpAr5stZ2Xnqwv5qgjmZij2vSqFOPEd/9fYFngg uXsxlJ40A0eVwAE/prBPSmEo2LIrB4Xf8wFgEJ1tAZ37iGryJmYgKl9+ePwznOgZ bPtQ8xtC8i8Buzo/i4+Fmeq3bodFxNsrvknJug2zc22SwZ+bgYapIP88cEwxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhosWUfBcdnYSDbDSgCM78TrnaVYwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzF8Rsuo8VAeo9NOVw+K 7A1YixPl/Z1MjMh4Gmou9jH9JvgDBjtZwGEPVwMfbpaPSVBypcB5yt3e1uJNWa0H 9jXYEKeQDfDvieUMTyNhhlGhHE2qqDpVy84lT3LyV2T7fJQX9pSQAt00QIuEXj0+ pSX5od2ymtpDCPTnecdY3LgHGsDPjAL5g51vBQSJYb3VLD+SOt7MlWF6Xzkp+NeN +jg1eK2nr33PcWWYPO+M6kkCYhUw6dLom/s8qH/auhvqBAsevW33iQTn8Gpfzc2N mgstsNvylks1NZYY4GfXXdicpxiOVqf3W+v/j5nPBeNEZu6p2spwc8YfPELZIt/q VQ== -----END CERTIFICATE-----Generated at Wed Jul 23 06:10:23 2025 by rpki-client